Got it, analysis now pulling me back more than a few things to review from systems… (with huge thanks to @jgstew for his examples, along with others that have also posted examples here).
I’m getting the following:
Most Recent ClamAV scan log - using following relevance:
( name of it, modification time of it ) of items 1 of ( maximum of modification times of files whose ( name of it as lowercase starts with "clamscan" ) of it, files whose ( name of it as lowercase starts with "clamscan" of it ) of it ) whose ( item 0 of it = modification time of item 1 of it ) of folder "/var/log/clamav"
Most recent Freshclam log - using following relevance: (very similar to the previous)
( name of it, modification time of it ) of items 1 of ( maximum of modification times of files whose ( name of it as lowercase starts with "freshclam" ) of it, files whose ( name of it as lowercase starts with "freshclam" of it ) of it ) whose ( item 0 of it = modification time of item 1 of it ) of folder "/var/log/clamav"
Most recent file in the log folder: (in case the system isn’t using the expected configuration for ClamAV and is producing a different log file name)
( name of it, modification time of it ) of items 1 of ( maximum of modification times of files whose ( name of it as lowercase ends with ".log" ) of it, files whose ( name of it as lowercase ends with ".log" of it ) of it ) whose ( item 0 of it = modification time of item 1 of it ) of folder "/var/log/clamav"
Name and date of oldest ClamScan log:
( name of it, modification time of it ) of items 1 of ( minimum of modification times of files whose ( name of it as lowercase starts with "clamscan" ) of it, files whose ( name of it as lowercase starts with "clamscan" of it ) of it ) whose ( item 0 of it = modification time of item 1 of it ) of folder "/var/log/clamav" /* ( name of file of it, modification time of it ) of find file "clamscan*.log" of folder "/var/log/clamav" */
And the one that I was stumbling on for above… (clearly not understanding what the sample was trying to show me, as I was actually trying to use the sample above to pull back say the last 15 log file names and dates vs. pulling back all of them) - All ClamScan logs in the log folder:
(name of it, modification time of it) of files whose (name of it as lowercase starts with "clamscan" of it) of folder "/var/log/clamav"
(I am still interested in limiting the results to say the last 15 entries and not “all” of the logs, but for now the "all of the log file names works to covers my needs – satisfying requirements to audit the systems and confirm that ClamAV has been running and performing the expected scans)